[tor-commits] [snowflake-webext/main] Bump the version of cldr to satisfy npm audit

arlo at torproject.org arlo at torproject.org
Fri May 14 19:42:55 UTC 2021


commit f92fc4bddc93c6af375c5090483e770f3fecfb91
Author: Arlo Breault <abreault at wikimedia.org>
Date:   Fri May 14 14:47:11 2021 -0400

    Bump the version of cldr to satisfy npm audit
    
    There's a low severity vuln in one of cldr's deps that needs updating.
    The major version bump of cldr is because it drops support for node.js
    v8, which is EOL.
---
 package-lock.json | 14 +++++++-------
 package.json      |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 5fc116a..2382903 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -176,9 +176,9 @@
       "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg=="
     },
     "cldr": {
-      "version": "5.8.0",
-      "resolved": "https://registry.npmjs.org/cldr/-/cldr-5.8.0.tgz",
-      "integrity": "sha512-w0L5FX4X3txDX5G/YSbDAQuneVSFPSKjOXB2ehWh/J6BN7RJ+IUEVNG9hIGjuJoyYJcVGE2AoL0W0VSjirQPIg==",
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/cldr/-/cldr-6.1.0.tgz",
+      "integrity": "sha512-VOTKD20z054xBw1p6Ax1XqM1PEJ96JAVlTHhPH4AgX8E5uaONzuxhoaI2LYcqD1a2pBrX69NGlW6hB0SfaCGlA==",
       "dev": true,
       "requires": {
         "escodegen": "^2.0.0",
@@ -188,7 +188,7 @@
         "pegjs": "^0.10.0",
         "seq": "^0.3.5",
         "unicoderegexp": "^0.4.1",
-        "xmldom": "^0.4.0",
+        "xmldom": "^0.6.0",
         "xpath": "^0.0.32"
       }
     },
@@ -1597,9 +1597,9 @@
       }
     },
     "xmldom": {
-      "version": "0.4.0",
-      "resolved": "https://registry.npmjs.org/xmldom/-/xmldom-0.4.0.tgz",
-      "integrity": "sha512-2E93k08T30Ugs+34HBSTQLVtpi6mCddaY8uO+pMNk1pqSjV5vElzn4mmh6KLxN3hki8rNcHSYzILoh3TEWORvA==",
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/xmldom/-/xmldom-0.6.0.tgz",
+      "integrity": "sha512-iAcin401y58LckRZ0TkI4k0VSM1Qg0KGSc3i8rU+xrxe19A/BN1zHyVSJY7uoutVlaTSzYyk/v5AmkewAP7jtg==",
       "dev": true
     },
     "xmlhttprequest": {
diff --git a/package.json b/package.json
index d9d7d2c..ff59a7d 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
   "author": "Serene Han",
   "license": "BSD-3-Clause",
   "devDependencies": {
-    "cldr": "^5.8.0",
+    "cldr": "^6.1.0",
     "domino": "^2.1.6",
     "eslint": "^6.0.1",
     "jasmine": "2.5.2"



More information about the tor-commits mailing list